Position:
Senior Manager - SecOps

Job Description:

• We are seeking a highly experienced and proactive Senior SOC Manager to lead our global Security Operations Center (SOC) in India. This role demands a blend of strategic leadership, hands-on technical expertise, and exceptional interpersonal skills. We are looking for someone who not only meets the technical requirements but also aligns well with our team's values and culture. The ideal candidate will have a proven track record in SOC management, a knack for continuous improvement, and a proactive approach to security operations

• Oversee daily operations of the SOC, including shift scheduling and ensuring effective coverage across all shifts.
• Manage SOC personnel, including performance reviews, skills and training development, and addressing operational challenges.
• Implement and enforce operational procedures and standards to ensure high-quality and efficient SOC operations.

• Direct the SOC team in monitoring, detecting, and responding to security incidents and alerts in real-time.
• Direct the SOC team in monitoring, detecting, and responding to operational system uptime performance alerts in real-time. Ensure optimal performance of all Security Operations systems.
• Direct the SOC team in threat hunting and threat intelligence monitoring and detection operations.

• Develop and refine SOC strategies, policies, and procedures to enhance the organization's security posture and response capabilities.
• Drive continuous improvement initiatives within the SOC, focusing on process optimization and efficiency gains.
• Drive process and workflow automation initiatives within the SOC, focusing on process optimization and efficiency gains.
• Drive AI/ML SOC workflows, tasks, procedures for optimization and efficiency gains.
• Stay current with the latest security trends and technologies to ensure the SOC adapts to emerging threats.

• Mentor and develop SOC team members, fostering a culture of continuous learning and professional growth.
• Conduct regular team meetings and one-on-one sessions to discuss performance, career development, and operational improvements.
• Establish a collaborative environment where team members are encouraged to contribute ideas and solutions beyond their immediate tasks.

• Provide regular updates and reports to senior leadership on SOC performance, including key metrics, incident trends, and areas for improvement.
• Communicate complex security issues clearly to both technical and non-technical stakeholders, ensuring alignment with organizational objectives.

• Ensure SOC processes and operations comply with regulatory requirements, industry standards, and internal policies.
• Conduct regular assessments and audits of SOC systems, processes, and controls to identify and address gaps or areas for improvement.

• Build and maintain relationships with external partners, vendors, and industry peers to stay informed about emerging threats and best practices.
• Collaborate with external parties to enhance SOC capabilities and effectiveness.

• 12+ years of experience in SOC roles, with at least 5 years in a security management position.
• Demonstrated experience in managing SOC operations, including shift scheduling, team management, and security event response in global or large-scale environments.

• Extensive experience with SIEM solutions Microsoft Sentinel
• Strong knowledge of security operations, incident response methodologies, and security technologies (SIEM, IDS/IPS, EDR, Insider Risk, DLP, WAF, Cloud Application, SaaS monitoring, Vulnerability Management, Firewall, Antivirus, and other SOC monitoring and or detection tools).
• In-depth understanding of networking concepts, including TCP/IP protocols, firewall configuration, and network segmentation.
• In-depth understanding of identity concepts, including multifactor authentication, authentication protocols, user behaviors.
• In-depth understanding of cloud and endpoint concepts, including malware forensics, browser forensics, cloud forensics, mobile device forensics.

• Proven ability to enhance SOC processes and implement best practices.
• Strong understanding of Threat Intelligence, Threat Hunting, Vulnerability Management, and risk assessment frameworks.
• Experience in creating and refining SIEM rules, alerts, and correlation logic.

• Relevant certifications such as CISSP, CISM, CISA, or GIAC certifications are highly desirable.
• Additional certifications in cybersecurity or security management are a plus.

• Exceptional problem-solving and decision-making abilities with a proactive and results-driven mindset.
• Excellent leadership and team management skills, with the ability to inspire and guide teams in high-pressure situations.
• Strong communication skills, capable of articulating complex security issues to both technical and non-technical audiences.